{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:33.884Z","products":["linksys"],"actNowTotal":0,"results":[{"query":"linksys","matched":1,"actNow":0,"events":[{"id":"early-cve-2025-34037","url":"https://securitythreatpulse.com/events/early-cve-2025-34037","title":"Linksys E4200: attackers can run their own code","verdict":"watch","verdictReason":"Attack attempts are confirmed, with no confirmed exploitation yet.","tier":null,"rankScore":3,"rankWhy":["Ready-made attack tools are public.","The first report is 20 days old.","11 products are affected."],"rulesVersion":"v3","ladder":{"talk":"none","damage":"none","attempts":"confirmed","exposure":"none","exploited":"none"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2025-34037"],"vendor":"Linksys","product":"E4200","affectedProducts":[{"kind":"direct","slug":"linksys/e4200","vendor":"Linksys","product":"E4200","evidence":["cna","cpe"],"vendorKey":"linksys","productKey":"e4200"},{"kind":"direct","slug":"linksys/e3200","vendor":"Linksys","product":"E3200","evidence":["cpe"],"vendorKey":"linksys","productKey":"e3200"},{"kind":"direct","slug":"linksys/e3000","vendor":"Linksys","product":"E3000","evidence":["cpe"],"vendorKey":"linksys","productKey":"e3000"},{"kind":"direct","slug":"linksys/e2500v1v2","vendor":"Linksys","product":"E2500 V1/v2","evidence":["cpe"],"vendorKey":"linksys","productKey":"e2500v1v2"},{"kind":"direct","slug":"linksys/e2100lv1","vendor":"Linksys","product":"E2100l V1","evidence":["cpe"],"vendorKey":"linksys","productKey":"e2100lv1"},{"kind":"direct","slug":"linksys/e2000","vendor":"Linksys","product":"E2000","evidence":["cpe"],"vendorKey":"linksys","productKey":"e2000"},{"kind":"direct","slug":"linksys/e1550","vendor":"Linksys","product":"E1550","evidence":["cpe"],"vendorKey":"linksys","productKey":"e1550"},{"kind":"direct","slug":"linksys/e1500v1","vendor":"Linksys","product":"E1500 V1","evidence":["cpe"],"vendorKey":"linksys","productKey":"e1500v1"},{"kind":"direct","slug":"linksys/e1200v1","vendor":"Linksys","product":"E1200 V1","evidence":["cpe"],"vendorKey":"linksys","productKey":"e1200v1"},{"kind":"direct","slug":"linksys/e1000v1","vendor":"Linksys","product":"E1000 V1","evidence":["cpe"],"vendorKey":"linksys","productKey":"e1000v1"},{"kind":"direct","slug":"linksys/e900v1","vendor":"Linksys","product":"E900 V1","evidence":["cpe"],"vendorKey":"linksys","productKey":"e900v1"}],"category":{"id":"network-device","label":"Routers, cameras and devices","why":"Routers, cameras and recorders are often forgotten and rarely updated.","doThis":"Update it or replace it. Never leave its admin page open to the internet."},"summary":"An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcp_ip parameter without sanitization, allowing unauthenticated attackers to inject shell commands.","cvss":10,"epss":0.96154,"exploitMaturity":"weaponized","kevListed":false,"kevDateAdded":null,"kevDueDate":null,"firstSeenAt":"2026-10-22T00:00:00.000Z","updatedAt":"2026-11-11T00:00:06.173Z","newestEvidenceAt":"2026-10-23T00:00:00.000Z"}]}]}